Legal

Privacy Policy

Last updated: February 21, 2026

Overview Introduction

Pict AI ("we," "us," or "our") operates the Pict AI website at pict.ai and the Pict AI mobile applications for iOS and Android (collectively, the "Service"). We are committed to protecting your privacy. We designed Pict AI so that you can create AI generated images safely, privately, and without sharing personal information.

We take privacy seriously. By design:

  • We do not collect biometric identifiers
  • We do not store face data
  • We do not sell or share data for advertising
  • We only process images temporarily to generate AI results

By using the Service, you consent to the practices described below.

No Collection What Data We Do NOT Collect

We do not collect or store:

  • No email address (no account required)
  • No name or personal account information
  • No personal identifiers beyond IP address for rate limiting
  • No third-party analytics, no Firebase, no advertising trackers
  • No generated images on our servers
  • No uploaded images after processing is complete

Your images never stay on our servers. We do not have permanent access to them after processing.

Face Data Images You Upload (Face Data)

When you upload a photo, it may contain a person's face. We treat it as sensitive data, and:

  • We do not extract facial measurements
  • We do not create or store faceprints
  • We do not use face recognition
  • We do not identify anyone
  • We do not collect, derive, or process biometric identifiers or any facial geometry data

The image is stored temporarily only to send it to Google's Gemini API and generate your result. It is then deleted automatically. Neither Pict AI nor Google Gemini stores uploaded photos after processing. Images are automatically deleted once the AI output is returned.

Processing How Your Photos Are Processed

Pict AI is an AI image generator and photo editor. When you upload a photo or enter a text prompt:

  • Your image is transmitted securely to our server via HTTPS
  • The image or text prompt is sent directly to Google Gemini API (Nano Banana AI engine) for processing
  • Processing is encrypted in transit using HTTPS
  • Generated images are returned and delivered directly to your browser for download
  • The uploaded image and generated result are deleted from our server after delivery

We do not view, permanently store, copy, or retain access to any photos after processing is complete.

Data Use How We Use Your Data

We use your data exclusively to:

  • Generate your AI image, photo edit, or image transformation
  • Enforce fair usage limits (2 free uses per tool per IP)
  • Maintain service stability and security

We do not use your data to:

  • Advertise or build advertising profiles
  • Track you across other apps or websites
  • Train, fine-tune, or improve any AI models
  • Sell or share with data brokers

Face Processing Face Data Processing Details

What Face Data Is Processed: Only the photo you upload. No additional analysis or identification is performed. We do not collect, derive, or process biometric identifiers or any facial geometry data. Images you upload may contain faces. We treat these images as sensitive data. We do not extract biometric identifiers, facial measurements, or faceprints. Images are used solely to generate the requested AI transformation.

Purpose of Processing: Exclusively to generate the requested AI output (image generation, photo editing, background removal, style transfer, enhancement, or other selected tool function).

Third-Party Processing: Photos are transmitted securely to Google Gemini API, which acts solely as a data processor. Google does not use your photos to train models when processing via the Gemini API. Google processes uploaded photos only as a data processor acting on our behalf. Google does not store these images after processing, does not use them to train models, and does not use them for any advertising or tracking purposes.

For more information about Google's AI privacy approach, visit:

Retention: Images are kept only during processing. They are automatically deleted as soon as the output is returned. We retain no facial data. We do not store generated outputs on our servers.

No Sharing with Third Parties: Face data is never sold, shared with advertisers, shared with analytics providers, or shared with data brokers. Only Google receives images purely for AI processing.

IP Address Usage Tracking

We record your IP address solely to enforce fair usage limits (2 free uses per tool per IP address). IP addresses are stored in server-side usage log files and are not linked to any personal identity, account, or profile. These logs contain only IP addresses and usage timestamps.

No Tracking Cookies and Tracking

Pict AI does not track users for advertising purposes. We do not:

  • Link data with third-party data
  • Share personal data with ad networks
  • Create advertising identifiers
  • Use third-party tracking cookies or analytics cookies

The Service may use minimal first-party localStorage for functional purposes such as remembering usage counts on the client side. No third-party cookies are set.

Third Parties Third-Party Providers

To generate your AI images and process photos, Pict AI uses:

  • Google Gemini API (AI image generation and editing)
  • Apple App Store (iOS app distribution)
  • Google Play Store (Android app distribution)

We do not share data with advertisers or data brokers. We do not sell, rent, or share your personal data with third parties for marketing purposes.

Security Data Security

We use:

  • HTTPS encryption for all data in transit
  • Access-controlled server infrastructure
  • Automatic image deletion after processing
  • Industry-standard security measures

All image transfers occur using encrypted HTTPS connections. No user images are persisted on our servers. Your creations exist only on your personal device after download. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

Retention Data Retention Summary

Data Type Retention
Uploaded photos Deleted immediately after processing
Generated images Delivered to browser, not stored on server
Text prompts Not stored after processing
Face data Never stored; deleted with uploaded photo
IP usage logs Stored for rate limiting only
Personal accounts Not applicable; no accounts collected

We do not retain any uploaded images, face data, or generated content on our servers after processing is completed.

Your Rights Data Rights and Control

Because we collect minimal data and do not maintain user accounts, most traditional data rights (access, correction, deletion of account data) do not apply in the typical sense. Since we do not store your generated images or maintain accounts, there is no persistent personal data to delete upon discontinuation of use.

Depending on your region, you may request:

  • Data deletion
  • Access to information we hold about you
  • Correction of inaccurate data

If you believe your IP address has been incorrectly rate-limited or blocked, you may contact us for review. Users in the European Economic Area (EEA) and other jurisdictions with data protection laws may have additional rights regarding their IP address data.

Children Children's Privacy

The Service is not designed for children under 13 without parental supervision. We do not knowingly collect personal data from children under 13. We store no identifying data about any user. If you believe a child under 13 has provided us with personal data, please contact us and we will take steps to delete such information.

Updates Changes to This Policy

We may update this Privacy Policy when necessary. The updated version will always be available on this page. Your continued use of the Service after changes are posted constitutes acceptance of the revised policy.

Contact Contact Us

If you have questions about this Privacy Policy, contact us at hello@mindtastik.com.